Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e203238323730.roa
File: 3138362e3231392e3135312e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: vFU40tzwkvq+WysEadAmMlmQT/XKJrjNaoZSOL/xIl0=
Subject key identifier: BD:4F:C4:DC:50:3F:F0:EC:96:05:C2:85:A1:44:C3:80:54:3F:D8:B8
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 35CE97042E78AE8FD5DE3FEC1EB81AF82AB8405D
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:52:53 +0000
ROA not before: Mon 14 Oct 2024 01:47:53 +0000
ROA not after: Mon 13 Oct 2025 01:52:53 +0000
asID: 28270
IP address blocks: 186.219.151.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ce:97:04:2e:78:ae:8f:d5:de:3f:ec:1e:b8:1a:f8:2a:b8:40:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:47:53 2024 GMT
Not After : Oct 13 01:52:53 2025 GMT
Subject: CN=BD4FC4DC503FF0EC9605C285A144C380543FD8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:33:ee:9c:2b:e9:7a:3c:28:58:e6:6d:d1:
08:21:48:bf:95:72:9e:b6:7c:80:de:34:4d:26:7d:
d3:1f:e4:5a:7d:ba:0c:93:6b:42:30:9b:75:03:2c:
0c:e3:a2:0c:4c:6b:4c:2f:43:5b:52:02:96:18:f5:
2b:7e:c1:d0:9e:4d:01:9c:08:4f:3e:eb:5d:5a:8b:
26:71:a4:42:0b:02:46:c7:48:40:27:46:2e:d7:f4:
d6:21:42:85:9d:7b:12:f2:53:1e:74:af:ad:c0:a7:
a1:5b:00:0c:d3:4d:fd:ed:64:45:1d:bb:79:25:c9:
e5:54:06:4b:ff:50:35:82:23:72:b1:0f:eb:60:8e:
af:95:be:17:2f:79:c2:71:09:df:91:69:aa:fd:4d:
ba:e8:22:9f:a3:c9:29:24:8e:01:65:02:7a:42:49:
7c:8e:7e:f4:11:53:48:c3:ea:96:32:fd:38:89:55:
02:4c:ec:66:56:28:21:0b:fd:26:1a:da:e2:4b:a6:
39:3b:a3:ae:99:2f:fa:75:d8:4a:ab:57:04:0e:53:
bb:27:66:24:a4:7a:fd:f9:20:43:ca:99:f7:89:62:
26:7a:79:da:47:a3:6a:bd:ce:bd:ea:04:78:67:01:
ac:27:7a:b5:7a:d6:29:5c:69:73:c3:4d:d3:43:5a:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:C4:DC:50:3F:F0:EC:96:05:C2:85:A1:44:C3:80:54:3F:D8:B8
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.151.0/24
Signature Algorithm: sha256WithRSAEncryption
38:42:3c:ad:17:cd:54:c2:d3:5f:94:32:b4:0c:73:f9:39:bc:
f2:e6:11:94:f1:37:f9:14:dd:da:8a:f2:b3:48:3a:5c:1a:23:
2e:07:4a:33:7a:b4:b9:7b:01:25:8b:72:d5:d0:e6:ee:ec:a6:
b9:38:f9:1d:ab:dc:2f:cd:33:d8:40:78:b6:0e:23:d5:66:34:
b9:0a:7d:c1:2c:49:43:3b:fb:1c:20:8b:e4:98:da:a8:63:c1:
56:01:d7:b1:32:1a:4b:b6:74:b3:fa:6a:6d:22:09:b5:c1:81:
8f:12:f5:dc:a4:89:a7:68:d6:5f:20:25:83:cd:2e:22:f4:08:
4b:51:27:e2:9c:41:06:e3:00:96:6c:d7:df:6d:23:0c:59:2d:
6c:4c:10:da:64:27:01:2a:00:34:21:78:c4:a1:4f:b3:09:ba:
6f:3e:90:e7:ea:df:13:f5:34:ff:3e:0f:7a:5c:77:9f:94:87:
8a:84:42:1a:25:fe:a5:9b:82:b4:eb:a1:30:79:2f:7b:ee:ce:
73:8d:9c:85:f3:08:30:91:7e:04:22:3d:50:24:bc:53:ac:67:
d8:9d:47:41:4f:a4:a9:dd:d9:07:30:12:6f:de:56:d7:dc:a5:
43:cf:a6:18:37:66:58:63:f4:71:a3:2a:f2:17:de:e0:c3:39:
ad:22:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org